IT Security Penetration Tester

Quick Facts

• Role: IT Security Penetration Tester (focused on application-level security assessments and AI threat modeling)

Description

The specialist independently performs security assessments at the application level. Responsibilities include identifying and mapping key AI-related threat scenarios, evaluating potential vulnerabilities and risk exposure, and defining appropriate risk-mitigation strategies. The role also supports threat-modeling workshops and maintains threat models using approved tools and methodologies.

Responsibilities

• Run workshops on threat modeling with application and platform teams
• Identify and assess assets, trust boundaries, attack surfaces, threats, and AI-related security risks
• Create and maintain threat models using approved threat-modeling tools and methodologies
• Review solution projects and architectural documentation to identify security gaps and verify threat coverage
• Map relevant AI threat scenarios to application components, data flows, and security mechanisms
• Collaborate with development, architecture, and security teams to define practical risk-mitigation actions
• Support less experienced team members during threat-modeling activities
• Track and report identified threats, security risks, mitigation actions, and remediation status

Requirements

• IT security architecture knowledge (concepts and principles; not a specific job title)
• Threat modeling capability
• OWASP Top 10 (nice-to-have)
• MITRE ATLAS (nice-to-have)